[Oisf-devel] [COMMIT] OISF branch, master, updated. suricata-2.1beta3-131-g4e177bc

OISF Git noreply at openinfosecfoundation.org
Mon Mar 23 08:57:25 UTC 2015


This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "OISF".

The branch, master has been updated
       via  4e177bc9d623ff83bfcf314989cd238debde5111 (commit)
       via  304c711a27ddca7413eb6fcd38929e5dc01c0dd2 (commit)
       via  e1efa7a0b54a710097be27c5294134bc9d277a11 (commit)
       via  4609495c607a7c419ef1c9d8607559a96c0362c3 (commit)
       via  5111aa2ec02089e1cbdd095d311610acd06cf638 (commit)
       via  9bcb02119f9e3c443f10f48c2d602db45a460a6f (commit)
       via  18f0351d9bcd69dff0839680050fea3bb8d3264b (commit)
       via  0b262cbfdac968cb5a05f46f2907bcdbf87f4fec (commit)
      from  0704ece4d7414dc5ba9427e9a0446dee9f34e13e (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 4e177bc9d623ff83bfcf314989cd238debde5111
Author: Victor Julien <victor at inliniac.net>
Date:   Fri Mar 20 21:58:50 2015 +0100

    detect-state: cleanups and comments

commit 304c711a27ddca7413eb6fcd38929e5dc01c0dd2
Author: Victor Julien <victor at inliniac.net>
Date:   Fri Mar 20 19:23:09 2015 +0100

    detect-state: use f->protomap instead of FlowGetProtoMapping(f->proto)

commit e1efa7a0b54a710097be27c5294134bc9d277a11
Author: Victor Julien <victor at inliniac.net>
Date:   Fri Mar 20 16:09:10 2015 +0100

    detect-flowbits: locking update
    
    Make matches that can be in the POSTMATCH list aware of the lock hint.

commit 4609495c607a7c419ef1c9d8607559a96c0362c3
Author: Victor Julien <victor at inliniac.net>
Date:   Fri Mar 20 16:22:19 2015 +0100

    detect-flowint: conditional locking

commit 5111aa2ec02089e1cbdd095d311610acd06cf638
Author: Victor Julien <victor at inliniac.net>
Date:   Fri Mar 20 15:47:39 2015 +0100

    detect-state: handle 'post match' locking
    
    The post match list was called with an unlocked flow until now.
    However, recent de_state handling updates changed this. The stateful
    detection code can now call the post match functions while keeping
    the flow locked. The normal detection code still calls it with an
    unlocked flow.
    
    This patch adds a hint to the DetectEngineThreadCtx called
    'flow_locked' that is set to true if the caller has already locked
    the flow.

commit 9bcb02119f9e3c443f10f48c2d602db45a460a6f
Author: Victor Julien <victor at inliniac.net>
Date:   Fri Mar 20 15:23:18 2015 +0100

    detect-flowint: fix unlocked flow access
    
    Some of the access to the flow and to structures retrieved from the
    flow was unlocked.
    
    This patch changes the logic to be wrapped in lock calls.

commit 18f0351d9bcd69dff0839680050fea3bb8d3264b
Author: Victor Julien <victor at inliniac.net>
Date:   Fri Mar 20 14:30:00 2015 +0100

    detect-state: fix profiling

commit 0b262cbfdac968cb5a05f46f2907bcdbf87f4fec
Author: Victor Julien <victor at inliniac.net>
Date:   Tue Mar 17 23:05:07 2015 +0100

    dns: optimize tx list walks
    
    The detection engine and log engines can walk the tx list indirectly,
    by looping AppLayerParserGetTx. This would lead to new list walks in
    the DNS tx list though. Leading to bad performance.
    
    This patch stores the last returned tx and uses that to determine if
    the next tx is what we need next. If so, we can return that w/o list
    walk.

-----------------------------------------------------------------------

Summary of changes:
 src/app-layer-dns-common.c |   19 +++++++++++++++
 src/app-layer-dns-common.h |    1 +
 src/detect-engine-state.c  |   31 +++++++++++++-----------
 src/detect-filestore.c     |    7 ++++--
 src/detect-flowbits.c      |   28 +++++++++++++++-------
 src/detect-flowint.c       |   57 +++++++++++++++++++++++++-------------------
 src/detect-flowvar.c       |   13 +++++++---
 src/detect-flowvar.h       |    5 ++--
 src/detect.h               |    6 ++++-
 src/flow-bit.c             |   27 ++++++++++++++-------
 src/flow-bit.h             |    3 +++
 11 files changed, 133 insertions(+), 64 deletions(-)


hooks/post-receive
-- 
OISF


More information about the Oisf-devel mailing list